mirrors/takahe
1
1
Fork 0
mirror of https://github.com/jointakahe/takahe.git synced 2024-12-23 05:56:29 +00:00
Code Issues Projects Releases Packages Wiki Activity

Switch to secrets module for upload names

Browse source
This commit is contained in:
Andrew Godwin 2022-12-03 14:06:55 -07:00
parent c78e446d2f
commit b3df5e763c
1 changed files with 2 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
core/uploads.py
View file

@ -1,6 +1,5 @@
import base64
import os
import uuid
import secrets
from django.utils import timezone
@ -11,5 +10,5 @@ def upload_namer(prefix, instance, filename):
"""
now = timezone.now()
_, old_extension = os.path.splitext(filename)
new_filename = base64.b32encode(uuid.uuid4().bytes).decode("ascii")
new_filename = secrets.token_urlsafe(20)
return f"{prefix}/{now.year}/{now.month}/{now.day}/{new_filename}{old_extension}"